If you're getting hundreds of thousands of spam submissions then you probably need to pay for bot protection.